FD.io VPP  v17.01.1-3-gc6833f8
Vector Packet Processing
node_out.c
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2016 Cisco and/or its affiliates.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at:
6  *
7  * http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 #include <vlib/vlib.h>
16 #include <vnet/vnet.h>
17 #include <vnet/pg/pg.h>
18 #include <vppinfra/error.h>
19 #include <acl/acl.h>
20 
21 #include "node_out.h"
22 
23 typedef struct
24 {
31 
32 /* packet trace format function */
33 static u8 *
34 format_acl_out_trace (u8 * s, va_list * args)
35 {
36  CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
37  CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
38  acl_out_trace_t *t = va_arg (*args, acl_out_trace_t *);
39  s =
40  format (s,
41  "ACL_OUT: sw_if_index %d, next index %d, match: outacl %d rule %d trace_bits %08x",
44  return s;
45 }
46 
48 
49 #define foreach_acl_out_error \
50 _(ACL_CHECK, "OutACL check packets processed")
51 
52 typedef enum
53 {
54 #define _(sym,str) ACL_OUT_ERROR_##sym,
56 #undef _
59 
60 static char *acl_out_error_strings[] = {
61 #define _(sym,string) string,
63 #undef _
64 };
65 
66 static uword
68  vlib_node_runtime_t * node, vlib_frame_t * frame)
69 {
70  acl_main_t *am = &acl_main;
71  u32 *output_feat_next_node_index =
73  u32 n_left_from, *from, *to_next;
74  acl_out_next_t next_index;
75  u32 pkts_acl_checked = 0;
76  u32 feature_bitmap0;
77  u32 match_acl_index = ~0;
78  u32 match_rule_index = ~0;
79  u32 trace_bitmap = 0;
80 
81  from = vlib_frame_vector_args (frame);
82  n_left_from = frame->n_vectors;
83  next_index = node->cached_next_index;
84 
85  while (n_left_from > 0)
86  {
87  u32 n_left_to_next;
88 
89  vlib_get_next_frame (vm, node, next_index, to_next, n_left_to_next);
90 
91  while (n_left_from > 0 && n_left_to_next > 0)
92  {
93  u32 bi0;
94  vlib_buffer_t *b0;
95  u32 next0 = ~0;
96  u32 next = 0;
97  u32 sw_if_index0;
98 
99  /* speculatively enqueue b0 to the current next frame */
100  bi0 = from[0];
101  to_next[0] = bi0;
102  from += 1;
103  to_next += 1;
104  n_left_from -= 1;
105  n_left_to_next -= 1;
106 
107  b0 = vlib_get_buffer (vm, bi0);
108 
109 
110  sw_if_index0 = vnet_buffer (b0)->sw_if_index[VLIB_TX];
111  feature_bitmap0 = vnet_buffer (b0)->l2.feature_bitmap;
112 
113  output_acl_packet_match (sw_if_index0, b0, &next, &match_acl_index,
114  &match_rule_index, &trace_bitmap);
115  if (next != ~0)
116  {
117  next0 = next;
118  }
119  if (next0 == ~0)
120  {
121  next0 =
122  feat_bitmap_get_next_node_index (output_feat_next_node_index,
123  feature_bitmap0);
124  }
125 
126 
127 
129  && (b0->flags & VLIB_BUFFER_IS_TRACED)))
130  {
131  acl_out_trace_t *t = vlib_add_trace (vm, node, b0, sizeof (*t));
132  t->sw_if_index = sw_if_index0;
133  t->next_index = next0;
134  t->match_acl_index = match_acl_index;
135  t->match_rule_index = match_rule_index;
136  t->trace_bitmap = trace_bitmap;
137  }
138 
139  pkts_acl_checked += 1;
140 
141  /* verify speculative enqueue, maybe switch current next frame */
142  vlib_validate_buffer_enqueue_x1 (vm, node, next_index,
143  to_next, n_left_to_next,
144  bi0, next0);
145  }
146 
147  vlib_put_next_frame (vm, node, next_index, n_left_to_next);
148  }
149 
151  ACL_OUT_ERROR_ACL_CHECK, pkts_acl_checked);
152  return frame->n_vectors;
153 }
154 
156 {
157  .function = acl_out_node_fn,.name = "acl-plugin-out",.vector_size =
158  sizeof (u32),.format_trace = format_acl_out_trace,.type =
159  VLIB_NODE_TYPE_INTERNAL,.n_errors =
160  ARRAY_LEN (acl_out_error_strings),.error_strings =
161  acl_out_error_strings,.n_next_nodes = ACL_OUT_N_NEXT,
162  /* edit / add dispositions here */
163  .next_nodes =
164  {
165  [ACL_OUT_ERROR_DROP] = "error-drop",
166  [ACL_OUT_INTERFACE_OUTPUT] = "interface-output",
167  [ACL_OUT_L2S_OUTPUT_IP4_ADD] = "aclp-l2s-output-ip4-add",
168  [ACL_OUT_L2S_OUTPUT_IP6_ADD] = "aclp-l2s-output-ip6-add",}
169 ,};
void vlib_put_next_frame(vlib_main_t *vm, vlib_node_runtime_t *r, u32 next_index, u32 n_vectors_left)
Release pointer to next frame vector data.
Definition: main.c:459
static uword acl_out_node_fn(vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *frame)
Definition: node_out.c:67
#define CLIB_UNUSED(x)
Definition: clib.h:79
void output_acl_packet_match(u32 sw_if_index, vlib_buffer_t *b0, u32 *nextp, u32 *acl_match_p, u32 *rule_match_p, u32 *trace_bitmap)
Definition: acl.c:1006
static u8 * format_acl_out_trace(u8 *s, va_list *args)
Definition: node_out.c:34
vlib_node_registration_t acl_out_node
(constructor) VLIB_REGISTER_NODE (acl_out_node)
Definition: node_out.c:47
bad routing header type(not 4)") sr_error (NO_MORE_SEGMENTS
u32 acl_out_node_feat_next_node_index[32]
Definition: acl.h:127
struct _vlib_node_registration vlib_node_registration_t
#define PREDICT_FALSE(x)
Definition: clib.h:97
static u32 feat_bitmap_get_next_node_index(u32 *next_nodes, u32 bitmap)
Return the graph node index for the feature corresponding to the first set bit in the bitmap...
Definition: feat_bitmap.h:79
#define vlib_validate_buffer_enqueue_x1(vm, node, next_index, to_next, n_left_to_next, bi0, next0)
Finish enqueueing one buffer forward in the graph.
Definition: buffer_node.h:216
#define vlib_get_next_frame(vm, node, next_index, vectors, n_vectors_left)
Get pointer to next frame vector data by (vlib_node_runtime_t, next_index).
Definition: node_funcs.h:350
static void vlib_node_increment_counter(vlib_main_t *vm, u32 node_index, u32 counter_index, u64 increment)
Definition: node_funcs.h:1113
u32 match_rule_index
Definition: node_out.c:28
u16 n_vectors
Definition: node.h:344
#define foreach_acl_out_error
Definition: node_out.c:49
#define ARRAY_LEN(x)
Definition: clib.h:59
Definition: acl.h:98
u16 cached_next_index
Definition: node.h:463
unsigned int u32
Definition: types.h:88
#define vnet_buffer(b)
Definition: buffer.h:361
#define VLIB_NODE_FLAG_TRACE
Definition: node.h:259
acl_main_t acl_main
Definition: acl.c:57
#define VLIB_BUFFER_IS_TRACED
Definition: buffer.h:95
u64 uword
Definition: types.h:112
static void * vlib_add_trace(vlib_main_t *vm, vlib_node_runtime_t *r, vlib_buffer_t *b, u32 n_data_bytes)
Definition: trace_funcs.h:55
Definition: defs.h:47
u32 match_acl_index
Definition: node_out.c:27
unsigned char u8
Definition: types.h:56
u32 trace_bitmap
Definition: node_out.c:29
static void * vlib_frame_vector_args(vlib_frame_t *f)
Get pointer to frame vector data.
Definition: node_funcs.h:253
#define VLIB_REGISTER_NODE(x,...)
Definition: node.h:143
u8 * format(u8 *s, const char *fmt,...)
Definition: format.c:418
acl_out_error_t
Definition: node_out.c:52
u32 flags
buffer flags: VLIB_BUFFER_IS_TRACED: trace this buffer.
Definition: buffer.h:85
acl_out_next_t
Definition: node_out.h:4
static vlib_buffer_t * vlib_get_buffer(vlib_main_t *vm, u32 buffer_index)
Translate buffer index into buffer pointer.
Definition: buffer_funcs.h:57
static char * acl_out_error_strings[]
Definition: node_out.c:60